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Amendments to the claims: 

This listing of claims replaces all prior versions and listings of cMms in the application: 

Listing of claims : 

1. (currently amended) A method for monitoring of communications traffic, comprising: 
connecting a recorder to a network switch to record recording packet-data 

communication traffic received from, and passing through, [[a]] die network switch; 

encrypting the packet-data communication traffic at an encryption engine 
communicatively connected to the recorder after the packet-data communication traffic has 
passed through the network switch to create encrypted data; and 

storing the encrypted data in a storage device such that the encrypted data can be 
decrypted only by means of decryption keys that exhibit restricted availability. 

2. (previously presented) The method as claimed in Claim 1 further including 
employment of a spare disk and/or CPU capacity within a telecommunications system. 

3. (previously presented) The method as claimed in Claim 1 further including the step of 
including encrypted search conditions within the decryption keys that are made selectively 
available. 

4. (previously presented) The method as claimed in Claim 1, further including the step of 
employing separate levels of authorization for access to the stored data. 

5. (previously presented) The method as claimed in Claim 1, further including the step of 
employing a decryption key that is useable only once. 
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6. (previously presented) The method as claimed in Claim 1, further including the step of 
logging all accesses to the stored data to an encrypted secure audit trziil. 

7. (previously presented) The method as claimed in Claim 1, further including a tamper 
detection reference within the encrypted data. 

8. (previously presented) The method as claimed in Claim 1, further including the step of 
monitoring all the available communications traffic. 

9. (previously presented) The method as claimed in Claim 8, wherein the step of storing 
the recorded traffic comprises the step of recording all of the recorded traffic. 

10. (previously presented) The method as claimed in Claim 1, wherein the 
communications traffic to be recorded comprises traffic through a telecommunications switch, 
router or gateway. 

11. (previously presented) The method as claimed in Claim 1, further including the step 
of encrypting details relating to the communications traffic and storing the said encrypted details 
for subsequent access. 

12. (previously presented) The method as claimed in Claim 1. further including the step 
of authorizing use of the required decryption key in a restricted manner. 

13. (currently amended) A system for monitoring of communications traffic, comprising: 
a recorder that records the communications traffic, the communications traffic being 

received by the recorder from a network switch; 

an encryption engine that encrypts the communications traffic after the communications 
traffic has passed through the network switch to the recorder : and 
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a Storage device that stores recorded communications trziffic as encrypted data, such that 
the encrypted data can be decrypted only by means of keys that exhibit restricted availability. 

14. (previously presented) The system as claimed in Claim 13 further including 
application software that executes the method steps of anyone or more of Claims 2-12. 

15. (canceled) 

16. (canceled) 

17. (currently amended) A method for monitoring of communications traffic, comprising 
the steps of: 

receiving communications traffic from a network switch at a recorder ; 
encrypting the communications traffic after the packet-data communication traffic has 
passed through the network switch to the recorder in order to generate encrypted 

communications traffic data; 

recording the encrypted communications traffic data; 

storing the recorded encrypted communications traffic data in a storage device such that 
the encrypted communications traffic data can be decrypted by decryption keys that exhibit 
restricted availability, that allow encrypted search conditions, and that employ separate levels of 
authorization for access to the stored data; and 

encrypting details relating to the communications traffic and storing the said encrypted 
details for subsequent access. 

18. (previously presented) The method as claimed in Claim 17, further including the step 
of employing a decryption key that is useable only once. 
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19. (previously presented) The method as cMmed in CMm 17, further including the step 
of logging all accesses to the stored data to an encrypted secure audit trdl. 

20. (previously presented) The method as claimed in Claim 17, further including a tamper 
detection reference within the encrypted data. 

21. (previously presented) The method as claimed in Claim 17, further including the step 
of monitoring all the available communications traffic. 

22. (previously presented) The method as claimed in Claim 17, wherein the step of 
storing the recorded traffic comprises the step of recording all of the recorded traffic. 



